vvvebjs@2.0.9

Drag and drop website builder javascript library

Direct Vulnerabilities

Known vulnerabilities in the vvvebjs package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • L
Directory Traversal

vvvebjs is a Drag and drop website builder javascript library

Affected versions of this package are vulnerable to Directory Traversal via the File argument in the /save.php endpoint. An attacker can access or modify files outside the intended directory by supplying crafted input to the parameter.

How to fix Directory Traversal?

There is no fixed version for vvvebjs.

*